Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2988/RSPhZgzZZw5_f9QC5FdUTDmv_pk.roa
File: RSPhZgzZZw5_f9QC5FdUTDmv_pk.roa (raw, json)
Hash identifier: 0/rtIA/CyHWaNlCG1HaTHIQcMOksE7XMp+JwopuZVL4=
Subject key identifier: 45:23:E1:66:0C:D9:67:0E:7F:7F:D4:02:E4:57:54:4C:39:AF:FE:99
Certificate issuer: /CN=012D4317BCA1660F88066F890F8C04AF557000CB
Certificate serial: 21DD
Authority key identifier: 01:2D:43:17:BC:A1:66:0F:88:06:6F:89:0F:8C:04:AF:55:70:00:CB
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/AS1DF7yhZg-IBm-JD4wEr1VwAMs.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2988/RSPhZgzZZw5_f9QC5FdUTDmv_pk.roa
Signing time: Fri 17 Jan 2025 01:28:44 +0000
ROA not before: Fri 17 Jan 2025 01:28:44 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139139
IP address blocks: 2406:3340::/36 maxlen: 36
2406:3340:1000::/36 maxlen: 36
2406:3340:2000::/36 maxlen: 36
2406:3340:3000::/36 maxlen: 36
2406:3340:4000::/36 maxlen: 36
2406:3340:5000::/36 maxlen: 36
2406:3340:6000::/36 maxlen: 36
2406:3340:7000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8669 (0x21dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=012D4317BCA1660F88066F890F8C04AF557000CB
Validity
Not Before: Jan 17 01:28:44 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=4523E1660CD9670E7F7FD402E457544C39AFFE99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:0f:fe:b4:e3:7a:a5:62:c0:b9:d9:a8:98:08:
2f:a6:99:be:17:b7:70:49:6c:f3:0f:68:0d:20:88:
a8:4d:7f:83:6f:a9:50:18:9f:67:0a:d9:da:7a:fa:
1c:1d:21:c1:43:c6:02:25:7e:2f:1a:d9:7c:2a:6d:
84:f3:ea:99:65:a9:f7:19:5e:f2:f3:a2:74:4b:40:
a9:27:c6:be:ab:37:1b:e7:7b:3f:8a:73:b1:70:bc:
4f:1e:4c:e8:9e:27:c8:4a:96:04:4c:55:9a:78:57:
38:55:39:d7:9d:12:5d:48:5b:5c:4a:71:7d:f7:87:
a9:14:dc:e6:5d:9b:3c:96:ef:d3:ad:e4:25:4f:18:
2e:9a:b3:41:8f:80:61:cd:9e:92:4b:12:b3:d4:25:
69:b5:ee:10:d4:bf:ae:79:77:1e:a0:3f:9a:49:ae:
bc:3c:3c:03:94:38:a6:bb:34:3c:49:28:95:db:82:
41:12:a5:3d:c8:6c:70:74:e0:54:5c:cf:0f:8b:93:
bb:2b:2b:02:34:71:a8:c2:ff:56:ac:fe:9e:3e:d5:
ca:c4:1b:7d:f5:fe:ae:6f:65:99:8c:97:17:20:09:
6e:4b:f0:c7:d8:04:8b:f2:5c:1d:6d:63:bc:e0:55:
15:57:d8:18:f1:0f:12:5a:e6:98:59:6e:50:ac:62:
91:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:23:E1:66:0C:D9:67:0E:7F:7F:D4:02:E4:57:54:4C:39:AF:FE:99
X509v3 Authority Key Identifier:
keyid:01:2D:43:17:BC:A1:66:0F:88:06:6F:89:0F:8C:04:AF:55:70:00:CB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2988/AS1DF7yhZg-IBm-JD4wEr1VwAMs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/AS1DF7yhZg-IBm-JD4wEr1VwAMs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2988/RSPhZgzZZw5_f9QC5FdUTDmv_pk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2406:3340::/33
Signature Algorithm: sha256WithRSAEncryption
79:fd:b1:0f:95:4b:94:3b:78:be:5d:0e:33:cb:42:34:d6:f4:
e2:09:31:24:5e:d3:80:61:35:4b:04:1c:cc:54:e6:93:04:f6:
ba:4c:74:c0:5f:91:d4:aa:28:99:1e:3e:6b:50:05:92:07:b8:
07:a4:4f:f9:95:c9:22:f6:2a:2a:6c:51:32:c8:1b:ae:89:b2:
81:1f:58:92:92:6e:92:ed:27:a0:d4:ba:ed:b5:44:0a:28:1e:
b1:1d:c6:6a:45:6d:0f:66:18:7c:03:b4:3c:90:14:8a:11:0f:
cb:42:cc:b3:32:1a:9b:49:57:47:b7:67:21:de:e3:76:a2:3a:
c9:99:33:b9:91:08:6f:30:8e:f9:fb:b4:11:a3:4f:e3:68:cb:
d0:77:f1:3a:04:9f:db:83:dd:31:37:ef:a8:e1:59:7c:0a:91:
be:02:21:d8:78:4b:46:e5:79:0e:95:1a:5a:a6:48:c3:39:ac:
7f:be:c1:b6:64:53:cd:bc:f3:e6:63:0c:97:2a:a6:51:01:5d:
08:b4:16:6d:0c:31:47:89:7e:87:2e:a9:2a:40:4e:29:9d:9c:
89:75:a0:1a:0f:6f:b4:e6:19:11:c3:1e:36:31:9a:83:66:d4:
30:a3:65:2b:e2:0a:72:53:1a:21:2b:d1:4d:b4:c1:b9:ea:17:
25:8f:97:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:42:38 2025 by rpki-client